Update team visibility and refresh premium UI styling

2026-02-24 00:51:23 +02:00
parent e3a74b2d50
commit 00fda3e045
14 changed files with 299 additions and 83 deletions
@@ -11,6 +11,11 @@ $method = $_SERVER['REQUEST_METHOD'];
 $id = $_GET['id'] ?? null;
 $type = $_GET['type'] ?? null; // 'global' for global sections

+// CSRF protection for write operations
+if ($method !== 'GET') {
+    requireSameOriginRequest();
+}
+
 switch ($method) {
    case 'GET':
        if ($type === 'global') {